Lucene search

[email protected]CVE-2018-3053

HistoryJul 18, 2018 - 1:29 p.m.

CVE-2018-3053

2018-07-1813:29:07

[email protected]

web.nvd.nist.gov

cve

oracle

retail

customer management

segmentation

foundation

vulnerability

exploitable

http

network access

integrity

availability

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. While the vulnerability is in Oracle Retail Customer Management and Segmentation Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L).

Affected configurations

NVD

Node

oracleretail_customer_management_and_segmentation_foundationMatch16.0.1

oracleretail_customer_management_and_segmentation_foundationMatch16.0.2

oracleretail_customer_management_and_segmentation_foundationMatch17.0.1

CPENameOperatorVersion
oracle:retail_customer_management_and_segmentation_foundationoracle retail customer management and segmentation foundationeq16.0.1
oracle:retail_customer_management_and_segmentation_foundationoracle retail customer management and segmentation foundationeq16.0.2
oracle:retail_customer_management_and_segmentation_foundationoracle retail customer management and segmentation foundationeq17.0.1

CPE	Name	Operator	Version
oracle:retail_customer_management_and_segmentation_foundation	oracle retail customer management and segmentation foundation	eq	16.0.1
oracle:retail_customer_management_and_segmentation_foundation	oracle retail customer management and segmentation foundation	eq	16.0.2
oracle:retail_customer_management_and_segmentation_foundation	oracle retail customer management and segmentation foundation	eq	17.0.1

CNA Affected

[
  {
    "product": "Retail Customer Management and Segmentation Foundation",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "16.x"
      },
      {
        "status": "affected",
        "version": "17.x"
      }
    ]
  }
]

References

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

www.securityfocus.com/bid/104827

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

Related for CVE-2018-3053

prion1 cvelist1 nvd1 oracle1